International Business Machines Corporation

Other

Mark John Anderson

Scott Forstie

James Michael Flanagan

Robert J Bestgen

Jeffrey M Uehling

Thomas James Schreiber

Craig Stephen Aldrich

Kathryn Rose Steinbrink

Jonathan Lee Triebenbach

Ellen B Streifel

Brian J Hasselbeck

Richard Donald Parrott

Allen K Mei

Ritchie Lee Nyland

Carol S Budnik

Anna P Dietenberger

Shantan Kethireddy

Michael D Pfeifer

Michael Alan Venz

David S Charron

Randy Keith Rolfe

Jane Ann Vold

Theresa Renee Euler

Kathy Lynn Passe

Kevin Robert Brettin

Renee Kristin Saxman

Russ Owen

Brian Robert Muras

Jeffrey Wayne Tenner

Mark William Theuer

Gary Ross Ricard

Daniel Beuch

Randy Scott Johnson

Chad Allen Olstad

Richard Lee Cole

Peter John Johnson

Yun Bj Wang

Larry William Youngren

Kyle Gilbertson

Robert Douglas Driesch, Jr

Kristopher Craig Whitney

Thomas Owen McKinley

Wilson D Lee

Scott Dennis Helt

Thomas Paul Giordano

Paul Douglas Koeller

David Andrew Jones

Curtis Neal Boger

Steven Virgil Hoeschen

Lynnette Elaine Carston

Jennifer Anne Dervin

Donald F Zimmerman

Donald R Halley

William S Davidson

Scott Joseph Heimer

Wayne Christopher Sadecki

Russell Edward Bruhnke

Peter B Passe

David Allan Baldes

Curtis D Schemmel

Christopher Julius Brandt

Shauna Rollings

Susan Liisa Romano

Matthew A Neill

A method of controlling resynchronization of a source database and a target database may comprise detecting that a connection between the source database and the target database has been restored. Based on the detecting, the method may also comprise identifying a first edit flag for a first row in a first table on the source database. Based on the identifying, the method may also comprise sending the first row from the source database to the target database. Based on the sending, the method may also comprise clearing the first edit flag for the first row.

Per row database resynchronization

Techniques for computer security are provided. A request to access a first file referenced as a variable in a source code of an application is received. A file name of the first file is then retrieved from a runtime stack, and the file name is stored in a system-wide accessible cross-reference file.

Comprehensive system wide cross-reference mechanism using runtime data collection

Techniques for warm cloning of computing nodes are provided. A request to clone a first computing node is received. Upon determining that a first transaction of a plurality of transactions is ongoing, a first moment in time when data associated with the first transaction was coherent on the first computing node is identified. Tracking data related to the first transaction is collected, beginning at the first moment in time. Further, a first storage associated with the first computing node is copied to a second storage associated with a second computing node, where the first transaction continues during the copying. The tracking data related to the first transaction is then transmitted to the second computing node.

Coherent cloning of active compute nodes

A query optimizer improves the efficiency of a computer database system utilizing an input-output correlator used with a create function that indicates a correlation between an input to the function and an output of the function. In an example, the input-output correlator is an OR OUTPUT parameter of a create table function. The query optimizer determines whether it can pass a value of a query to the input of the function in response to the input-output correlator. Under appropriate conditions, the query optimizer passes the query value to the input of the function to significantly reduce the amount of data returned by the function thereby reducing the load on database resources.

Correlation of input and output parameters for a function in a database management system

Systems, methods, and computer program products to perform an operation comprising receiving, from an application executing on a system, a request to access a data file, receiving data describing the request, wherein the data describing the request includes data from a runtime stack of the application, wherein the data from the runtime stack includes a program statement number, identifying, in a protected memory block, a first rule for accessing the data file, wherein the first rule specifies a program statement number permitted to access the data file, and upon determining that the program statement number from the runtime stack does not match the program statement number specified in the first rule, restricting access to the data file by the application.

Environmental security controls to prevent unauthorized access to files, programs, and objects

Systems, methods, and computer program products to perform an operation comprising receiving, from an application executing on a system, a request to access a data file, wherein the data file is referenced by a variable name in a source code of the application, receiving data describing the request, wherein the data describing the request is obtained from a runtime stack of the application and includes a name of the application and a name of the data file, wherein the name of the data file is used as a value for the variable name, and storing an indication that the application accessed the data file in a cross-reference data store for the system.

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, determining, based on environment information in the runtime stack, whether a first set of privileges available to the application are greater than a second set of privileges available to a the user of the application, storing the permission and identity information and an indication of whether the first set of privileges is greater than the second set of privileges in a data file, and adjusting the privileges for the user based on the determination.

Automated mechanism to analyze elevated authority usage and capability

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from a first application to obtain a set of call information based on runtime stack information related to calls of the first application requesting access to the file, storing the set of call information in a data file, receiving a request for access to the file from a second application, obtaining call information from a runtime stack from the second application, comparing the call information with the set of call information, determining the request for access is an abnormal request based on the comparing, and taking an action based on the determination.

Automated mechanism to obtain detailed forensic analysis of file access

Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, storing the permission and identity information in a data file, determining for the application and a file of the set of files, privileges available to the application for the available authority based on the stored data file, determining a set of privileges needed by the application to access the file based on the stored data file, selecting privileges for a user of the application based on set of privileges needed by the application and the authority available to the application, and assigning the privileges for the user based on the selected privileges.

Automated mechanism to secure customer data

A program identifier, a limit identifier, a minimum value, and an increment value are stored to limit data. The limit identifier identifies a first variable used by the program. In response to storing a data value to a second variable, the stored limit identifier is found and a determination is made whether the stored limit identifier identifies the second variable. If the stored limit identifier identifies the second variable, a determination is made whether the data value is greater than the minimum value. If the data value is greater than the minimum value, the data value is stored to a log if an absolute value of the data value minus a most recently logged data value that was previously stored to the second variable is greater than the increment value. The execution of the program is halted or a user is notified in response to the storing to the log.

Storing changes made toward a limit

A database trigger generates a return code having the effect of inhibiting further executions of the trigger within a pre-defined scope of execution. Preferably, the pre-defined scope is a task or process executing on behalf of a particular user. Upon first encountering the applicable trigger condition, the corresponding trigger is fired normally. Internal logic within the trigger determines whether it is necessary to call the same trigger again within the same scope, and if not, generates corresponding return data. A database management system which manages the trigger and causes it to automatically fire intercepts the return data and disables further firing of the trigger for the pre-defined scope.

Controlling database trigger execution with trigger return data

An index advice record engine generates and stores index advice records. An index advice policy mechanism allows a user to define an index advice policy that specifies criteria for autonomic index creation. An autonomic index creation mechanism reads the index advice records, compares this information with the criteria in the user-defined index advice policies, and determines whether an index should be created based on the information in the index advice records and the index advice policies. By automating the process of creating indexes according to user-defined policies, the preferred embodiments alleviate human users from most of the work of manually creating indexes.

Autonomic index creation

An index advice record engine generates and stores index advice records. An index advice policy mechanism allows a user to define an index advice policy that specifies criteria for autonomic index creation, modification and deletion. An autonomic index mechanism reads the index advice records, compares this information with the criteria in the user-defined index advice policies, and determines whether an index should be created, modified or deleted based on the information in the index advice records and the index advice policies. By automating the process of creating, modifying and deleting indexes according to user-defined policies, the preferred embodiments alleviate human users from most of the work of manually creating, modifying and deleting indexes.

Autonomic index creation, modification and deletion

Embodiments of the invention provide a method, article of manufacture, and an apparatus used to provide an interface driven by database tables. The method includes receiving a query identifier associated with a database query. The query is executed to generate a set of query results, and a set of actions associated with the set of query result is also identified. The set of query results and the set of actions are provided to a client component of the database-driven interface.

Method for providing a user interface driven by database tables

Growing community of inventors

Oronoco, MN, United States of America

Mark John Anderson